*For this entry exists the more relevant or more recent entry (MC190024)
check before: 2019-05-01
Product:
Advanced Threat Protection - Azure (ATP), Advanced Threat Protection - Office 365, Defender ATP, Exchange
Platform:
Developer, Online
Status:
Launched
Change type:
Links:
(MC190024)
(MC176803)
(MC176088)
Details:
We have been working on enhancing the email phishing and All-email views in Explorer by adding new functionalities to include additional details on URLs for our Office 365 ATP customers helping them drill down for a deeper investigation. The enhancements include: • URLs included in messages • Filtering based on URL information • Display of URL information in the graph/pivot • Safe Links time-of-click data on allowed/blocked clicks from messages Every time a potentially malicious URL click is detected by change in URL’s reputation post-detonation or overridden URL click, an alert is fired with linked details for the admin to take necessary action. This strengthens the loop by enabling analysis on URLs for delivered mail, supporting security analysis for missed phish, data loss, and other security investigations. Since the URL features will be in preview, URL data will be available for days as indicated in the user interface. This will extend as we go GA. We have also enriched phish detection events in the Office 365 management API. The schema will now include email phish and URL click events. We believe these enhanced views are critical to powering security investigation and remediation scenarios across advanced phishing attack vectors.
Change Category:
XXXXXXX ...
Scope:
XXXXXXX ...
Release Phase:
Created:
2019-03-16
updated:
2019-10-11
the free basic plan is required to see all details. Sign up here
A cloudsocut.one plan is required to see all the changed details. If you are already a customer, choose login.
If you are new to cloudscout.one please choose a plan.
Last updated 2 years ago
